Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer
File:                     50029dd9024c2c49dc8eb4a48df44bfd015f8874.cer (raw, json)
Hash identifier:          cYEqO5Hbi8Br/d3JIPgJ5SNanuUrWysuaVZv77wQhPI=
Subject key identifier:   20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B47F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Sat 22 Mar 2025 21:22:23 +0000
Subordinate resources:    AS: 262234
                          IP: 131.108.232.0/22
                          IP: 170.245.56.0/22
                          IP: 179.49.112.0/21
                          IP: 2803:db00::/32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 31 Mar 2024 12:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17516529 (0x10b47f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Mar 22 21:22:23 2025 GMT
        Subject: CN=50029dd9024c2c49dc8eb4a48df44bfd015f8874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:d3:b2:98:87:d2:8e:40:28:a9:ea:61:78:
                    a6:e9:2c:1f:69:c2:51:c4:85:93:d3:86:7e:5a:3c:
                    36:a9:df:80:a9:8b:1e:31:52:a7:24:06:18:6f:89:
                    2d:a1:f7:19:c6:57:3d:0f:38:09:15:6f:19:c7:c9:
                    cb:95:d2:db:0e:60:73:59:92:4f:69:84:d8:0b:8d:
                    1b:d8:cd:a6:7e:f7:ea:90:9c:43:51:80:77:39:6c:
                    2e:15:68:60:aa:e6:63:dc:f4:06:4f:e1:fc:60:b5:
                    99:e0:da:ad:98:c5:4a:bb:da:a0:2e:7a:5a:5f:03:
                    25:c9:60:32:55:5d:74:cd:92:62:31:de:65:2d:40:
                    2c:63:86:3c:ba:45:f7:b3:a1:54:64:5d:50:d8:8c:
                    29:93:ff:90:7b:f1:2d:15:47:b2:3d:b2:45:7e:fa:
                    aa:79:23:c7:28:0a:7c:9a:04:37:41:09:c5:1c:22:
                    38:fc:05:60:03:8d:3b:c9:81:28:33:33:14:b9:d0:
                    86:80:2e:05:4a:b0:f4:9c:43:64:05:17:a0:e5:38:
                    1a:86:01:e3:18:42:17:0e:76:31:25:3e:cf:0c:29:
                    f4:94:94:b1:f1:b8:f5:2b:27:82:5f:69:97:88:24:
                    b9:2b:f7:46:d9:63:cf:30:9d:31:e5:5f:c0:98:32:
                    51:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AC:FA:1F:E1:98:6E:0F:ED:0F:E5:A7:4A:56:2A:1F:92:FD:DC:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9345d2eb-3055-4252-ae4e-d0b991baf5cb/50029dd9024c2c49dc8eb4a48df44bfd015f8874.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.232.0/22
                  170.245.56.0/22
                  179.49.112.0/21
                IPv6:
                  2803:db00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262234

    Signature Algorithm: sha256WithRSAEncryption
         a3:84:6c:1d:20:a8:80:57:0e:32:37:a2:75:28:a3:35:e3:7d:
         28:e1:29:72:72:6e:71:6a:b0:6e:55:f2:56:5d:94:41:88:25:
         b5:07:f2:e7:26:3a:27:01:57:8b:ba:c0:5b:d9:65:3d:a8:fc:
         e9:0f:9d:1f:6a:86:5d:fb:f4:69:9f:61:2e:aa:b0:69:34:d3:
         56:3d:9e:f1:ec:c5:ec:a2:6a:a5:b4:73:1a:5d:00:0b:e2:36:
         8c:fd:0d:1a:c7:80:f1:f5:3b:7f:c2:2b:d5:aa:99:ec:43:25:
         1f:5c:06:6c:c6:9b:fa:33:e7:f2:54:b7:d4:e5:de:77:8d:c4:
         15:6a:4c:38:2c:a4:35:97:5e:3b:a9:23:a2:11:c4:b4:4c:97:
         2f:37:6c:93:8a:07:eb:3f:eb:28:78:f6:f7:71:6c:cc:c2:68:
         b3:55:6c:52:87:ad:d4:8c:b8:8a:74:68:78:28:74:49:2b:4e:
         f2:ab:eb:75:8e:c8:d4:f2:7c:58:5c:33:a2:8a:4a:f3:50:16:
         f6:ca:00:54:35:ad:c5:67:b9:4f:b4:71:32:ad:f4:94:eb:90:
         ae:ea:43:f9:ac:1d:fa:f6:a8:1a:a7:46:85:5a:f8:d2:ac:b7:
         81:55:3f:db:59:09:81:fc:39:1d:63:e2:ec:f5:99:33:45:9f:
         40:37:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 14:01:42 2024 by rpki-client on console-fra.rpki-client.org